{"metadata": {"vulnerability": "CVE-2023-39265", "count": 31, "kinds": {"milestone": 6, "sighting": 9, "kev": 0, "other": 16}}, "data": [{"timestamp": "2023-07-26T15:30:14.900Z", "date_only": false, "value": "2023-07-26T15:30:14.900Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-39265", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-06T13:00:11.612Z", "date_only": false, "value": "2023-09-06T13:00:11.612Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-39265", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-09-06T14:15:00Z", "date_only": false, "value": "2023-09-06T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-39265", "record": "GSD-2023-39265", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-09-06T14:15:10Z", "date_only": false, "value": "2023-09-06T14:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FM4Q-J8G4-C9J4", "record": "GHSA-FM4Q-J8G4-C9J4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-09-06T14:15:10.687Z", "date_only": false, "value": "2023-09-06T14:15:10.687", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-39265", "record": "FKIE_CVE-2023-39265", "field": "published"}, {"timestamp": "2023-09-06T15:30:27Z", "date_only": false, "value": "2023-09-06T15:30:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FM4Q-J8G4-C9J4", "record": "GHSA-FM4Q-J8G4-C9J4", "field": "published"}, {"timestamp": "2023-09-07T11:01:26Z", "date_only": false, "value": "2023-09-07T11:01:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8984", "record": "CVE-2023-39265", "field": "creation_timestamp", "uuid": "3de775a1-bf2a-4e77-ae56-4e054635c1f0", "content": "#exploit\n1. CVE-2023-4634:\nRCE Exploit for Wordpress Media-Library Plugin < 3.10\nhttps://github.com/Patrowl/CVE-2023-4634\n\n2. CVE-2023-27524, CVE-2023-39265, CVE-2023-37941:\nApache Superset\u00a0- RCE, Credential Harvesting & More\nhttps://www.horizon3.ai/apache-superset-part-ii-rce-credential-harvesting-and-more", "url": "https://t.me/CyberSecurityTechnologies/8984"}, {"timestamp": "2023-09-07T13:31:34Z", "date_only": false, "value": "2023-09-07T13:31:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/3838", "record": "CVE-2023-39265", "field": "creation_timestamp", "uuid": "91fa348a-4c80-420b-a8d3-f186ac51f412", "content": "Apache SuperSet users, beware! \n \nA critical update has been released to patch two new vulnerabilities (CVE-2023-39265 & CVE-2023-37941) that could expose your servers to remote code execution attacks. \n \nFind out here: https://thehackernews.com/2023/09/alert-apache-superset-vulnerabilities.html", "url": "https://t.me/thehackernews/3838"}, {"timestamp": "2023-09-07T13:42:21Z", "date_only": false, "value": "2023-09-07T13:42:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hqzcq-N-UmfLuy_GrV60Wdv72OSiDR6dOzg10bG3ca7Czg", "record": "CVE-2023-39265", "field": "creation_timestamp", "uuid": "b4e16ef6-d847-4210-8bbf-4fabdcea5518"}, {"timestamp": "2023-09-07T13:47:33Z", "date_only": false, "value": "2023-09-07T13:47:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/755", "record": "CVE-2023-39265", "field": "creation_timestamp", "uuid": "8b83638d-7cec-44be-95b7-6b39b2d5f5f4", "content": "Alert: Apache SuperSet Vulnerabilities Expose Servers to Remote Code Execution Attacks\nhttps://thehackernews.com/2023/09/alert-apache-superset-vulnerabilities.html\n\nPatches have been released to address two new security vulnerabilities in Apache SuperSet that could be exploited by an attacker to gain remote code execution on affected systems.\nThe update (version 2.1.1) plugs\u00a0CVE-2023-39265\u00a0and\u00a0CVE-2023-37941, which make it possible to conduct nefarious actions once a bad actor is able to gain control of Superset\u2019s metadata database.\nOutside of these", "url": "https://t.me/KomunitiSiber/755"}, {"timestamp": "2023-09-11T00:00:00Z", "date_only": true, "value": "2023-09-11", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-06819", "record": "CNVD-2024-06819", "field": "submitTime"}, {"timestamp": "2023-10-12T21:34:40Z", "date_only": false, "value": "2023-10-12T21:34:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_superset_cookie_sig_rce.rb", "record": "CVE-2023-39265", "field": "creation_timestamp", "uuid": "47422aac-de2f-47bf-b7fe-f6c8cd3eff21", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_superset_cookie_sig_rce.rb"}, {"timestamp": "2023-10-13T15:06:34.309Z", "date_only": false, "value": "2023-10-13T15:06:34.309Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2023-39265", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-10-13T16:15:00Z", "date_only": false, "value": "2023-10-13T16:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-39265", "record": "GSD-2023-39265", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-10-13T20:09:17Z", "date_only": false, "value": "2023-10-13T20:09:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FM4Q-J8G4-C9J4", "record": "GHSA-FM4Q-J8G4-C9J4", "field": "modified"}, {"timestamp": "2023-12-13T01:20:33.735Z", "date_only": false, "value": "2023-12-13T01:20:33.735954Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-39265", "record": "GSD-2023-39265", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-01T00:00:00Z", "date_only": true, "value": "2024-02-01", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-06819", "record": "CNVD-2024-06819", "field": "openTime"}, {"timestamp": "2024-08-02T18:02:06.680Z", "date_only": false, "value": "2024-08-02T18:02:06.680Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-39265", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-27T18:48:12.616Z", "date_only": false, "value": "2024-09-27T18:48:12.616873Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-39265", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-27T18:48:12.616Z", "date_only": false, "value": "2024-09-27T18:48:12.616873Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-39265", "record": "FKIE_CVE-2023-39265", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-27T18:48:35.245Z", "date_only": false, "value": "2024-09-27T18:48:35.245Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-39265", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-05T07:27:42.608Z", "date_only": false, "value": "2025-02-05T07:27:42.608Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-SUPERSET-2023-39265", "record": "BIT-SUPERSET-2023-39265", "field": "published"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-39265", "field": "creation_timestamp", "uuid": "d819c2e9-be78-4a73-a857-df007157f186"}, {"timestamp": "2025-02-13T17:02:41.251Z", "date_only": false, "value": "2025-02-13T17:02:41.251Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-39265", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-23T04:10:56Z", "date_only": false, "value": "2025-02-23T04:10:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-39265", "field": "creation_timestamp", "uuid": "d4434ab9-aedd-4e8f-b8cd-dc976b82b71d"}, {"timestamp": "2025-08-16T21:02:22.790Z", "date_only": false, "value": "2025-08-16T21:02:22.790599Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwkbd7mkem2m", "record": "CVE-2023-39265", "field": "creation_timestamp", "uuid": "072dae11-1c28-45c7-a2ea-32c404c516a4", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwkbd7mkem2m"}, {"timestamp": "2025-10-23T21:13:01Z", "date_only": false, "value": "2025-10-23T21:13:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-39265", "field": "creation_timestamp", "uuid": "5107e431-f9ea-40de-8e88-6914a09230c3"}, {"timestamp": "2026-06-17T06:11:52.037Z", "date_only": false, "value": "2026-06-17T06:11:52.037", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-39265", "record": "FKIE_CVE-2023-39265", "field": "lastModified"}, {"timestamp": "2026-07-07T11:45:23.589Z", "date_only": false, "value": "2026-07-07T11:45:23.589103Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-1177", "record": "PYSEC-2026-1177", "field": "published"}, {"timestamp": "2026-07-07T17:23:45.222Z", "date_only": false, "value": "2026-07-07T17:23:45.222759Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-1177", "record": "PYSEC-2026-1177", "field": "modified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-SUPERSET-2023-39265", "record": "BIT-SUPERSET-2023-39265", "field": "modified"}]}